CVE Catalog

CVE-2017-17110

Critical
Published: Translated: NVD NIST

Summary

Techno Portfolio Management Panel version 1.0 allows an attacker to inject SQL commands via a single.php?id= request.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update to the latest version of the software and implement mechanisms to protect against SQL injection.

Original NVD description (English source)

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS